Mid Business Analysis - Data Privacy

Overview

Business Analyst role in Data Privacy, managing website tracking mechanisms, cookie consent banners, telemetry, and first/third-party data collection practices to ensure legal compliance while preserving business analytics and marketing needs.

What you'll do

• Gather, structure, and document requirements across business and data domains using an Agile framework.
• Assess complex data flows, identify gaps, and perform root cause analysis.
• Build effective relationships across business, risk, and technology teams.
• Articulate privacy concepts clearly to both technical and non-technical stakeholders.
• Identify group-level standards, processes and frameworks impacted by privacy, such as Data Privacy Standards, Privacy Impact Assessment (PIA) process, ROPA, Cloud governance process, and API Management.
• Hands-on configure the One Trust tool, or any other cookies platform/tool.
• Conduct structured interviews and workshops with SMEs.
• Derive structured outputs in ambiguous environments with incomplete documentation.
• Connect data, process, and control perspectives to solve problems.
• Translate complex data and regulatory concepts into clear, actionable insights.
• Drive deliverables in a structured and timely manner within programme constraints.

What you'll need

• 8-10 years of strong functional experience in Data Privacy, Data Protection, Cookies, Consent Privacy Notice, Data Subject Rights.
• Strong Business Analysis (BA) experience.
• Understanding of HTTP headers, JavaScript tags, DOM storage, and browser cookies.
• Experience with Tag Management Systems (Google Tag Manager, Adobe Launch).
• Familiarity with website crawler and proxy tools etc.
• Strong understanding of data privacy, cookies, consent, privacy principles, and data subject rights.
• Strong stakeholder facilitation skills.
• Ability to translate complex legal and technical jargon into clear, actionable guidance for non-technical stakeholders.
• Strong analytical thinking and communication skills.
• Self-driven, with ability to manage multiple priorities in a programme-driven environment.

Nice to have

• Knowledge of GDPR and other country privacy requirements (e.g. SG PDPA) and its implications for banks.
• Implementation of GDPR or equivalent country regulation for a banking organization.
• Knowledge or practical experience of implementing privacy by design (PbD) concepts in large banks.
• Familiarity with consent management platform (CMP); good to have hands-on One Trust experience.
• Past cookies management experience and understanding of how it works.
• Certifications: CIPP/E or CIPP/US, CIPM, or CIPT.

Details

• Location: Bangalore / Chennai.
• Experience: 7-14 years.